159.223.97.91
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- North Bergen, New Jersey
No reports in the last 60 days
159.223.97.91 has been reported 111 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
111 from
69 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
denied traffic to a non-approved destination port. destination port 27017.
|
Port Scan | |
| 🇸🇬 celestialcity |
Blocked by UFW on celestialcityas [6688/tcp] | SPT: 61011 | TTL: 234 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇯🇵 mkaraki |
1786860945 # Service_probe # SIGNATURE_SEND # source_ip:159.223.97.91 # dst_port:2222
...
|
Port Scan | |
| 🇹🇷 Detmach |
Security attack detected. Multiple failed attempts from 159.223.97.91. IP banned for 1440 minutes at 25.05.2026 05:43:59. Failed attempts: 1
|
Brute-Force | |
| 🇧🇷 diego |
[probe-44-49] 2026-05-25 02:22:19, Client: 159.223.97.91, Protocol: 6, Unauthorized activity to HTTP: GET /
|
Web App Attack | |
| 🇨🇦 unullable |
CPoT triggered at tcp/443.GO-HTTP-CLIENT/1.1
|
Hacking | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud
|
Hacking Exploited Host | |
| 🇺🇸 Starburst SysOp Team |
Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-4)
|
Hacking Bad Web Bot | |
| 🇺🇸 RAP |
2026-05-23 00:16:06 UTC Unauthorized activity to TCP port 9200.
|
Port Scan | |
| 🇩🇪 ghostwarriors |
Webpage scraping
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 SSP |
Automatic report from iptables firewall - detected malicious activity
|
DDoS Attack Brute-Force SSH Web App Attack Port Scan Hacking | |
| 🇧🇷 chronos |
Possible malicious scan or exploit attempt on database services. | Port: 9200 | Proto: TCP | Location: United States, North Bergen
|
Hacking SQL Injection Exploited Host Port Scan | |
| 🇬🇧 Interceptor_HQ |
request_uri: / -- automatic report --
|
Brute-Force Hacking | |
| 🇫🇷 cityhunter_rhone |
Honeypot port triggered: HONEYPOT PORT 9200 touched. Automatic permanent ban. Mercurius-Guide automated detection.
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 RAP |
2026-05-21 03:17:53 UTC Unauthorized activity to TCP port 9200.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown